f10998f9fe8b005b3ebca126a731ff8158c577795daf39b1b338007567d28e07 | Triage

Sharing

General

Target

f10998f9fe8b005b3ebca126a731ff8158c577795daf39b1b338007567d28e07
Size

812KB
Sample

221123-pyx4ksce87
MD5

201d5ae00599d76f1593b9edc5085b7d
SHA1

b313b823677fd4654ab9fb9acb39494dff4a9ff1
SHA256

f10998f9fe8b005b3ebca126a731ff8158c577795daf39b1b338007567d28e07
SHA512

6a35d081a5acb55736a9c746d19c2c5a355a482c1951fe8e01d5050234888cad1b4b04801e5d91bcd94d8e26296656c634d05f41b5afb343c6f49285752fb931
SSDEEP

12288:fezofwmsY4D1ZG3aa7H8Ax+7dBmcU4Jd4mh3XK45NAlv:fe4FuD1w3afq+5UcFv4U3aYNAl

Score

8^/10

discovery persistence spyware stealer upx

Malware Config

Targets

- Target
  
  f10998f9fe8b005b3ebca126a731ff8158c577795daf39b1b338007567d28e07
- Size
  
  812KB
- MD5
  
  201d5ae00599d76f1593b9edc5085b7d
- SHA1
  
  b313b823677fd4654ab9fb9acb39494dff4a9ff1
- SHA256
  
  f10998f9fe8b005b3ebca126a731ff8158c577795daf39b1b338007567d28e07
- SHA512
  
  6a35d081a5acb55736a9c746d19c2c5a355a482c1951fe8e01d5050234888cad1b4b04801e5d91bcd94d8e26296656c634d05f41b5afb343c6f49285752fb931
- SSDEEP
  
  12288:fezofwmsY4D1ZG3aa7H8Ax+7dBmcU4Jd4mh3XK45NAlv:fe4FuD1w3afq+5UcFv4U3aYNAl
Score

8^/10

discovery persistence spyware stealer upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealerupx

behavioral2